How to remove KMSAuto.exe

KMSAuto.exe Removal: How to Get Rid of KMSAuto.exe2efa55fedc35ff4d202d940e75b61fce

KMSAuto.exe

The module KMSAuto.exe has been detected as Hack.KMS

KMSAuto.exe
Remove KMSAuto.exe

File Details

MD5: 2efa55fedc35ff4d202d940e75b61fce
Size: 6 MB
First Published: 2017-05-27 21:03:23 (2 years ago)
Latest Published: 2019-09-11 11:30:23 (5 days ago)
Status: Hack.KMS (on last analysis)
Analysis Date: 2019-09-11 11:30:23 (5 days ago)

Overview

Signed By: WZT
Status: Valid

Common Places:

%appdata%\microsoft\windows activator
%profile%\downloads\kmsauto.lite.portable.1.2.3.sae.rar
%sysdrive%\windows
%appdata%\microsoft
%windir%
%sysdrive%\programlar\işletim sistemi\microsoft office professional plus
%sysdrive%\formak driverlerii\0
%desktop%\kmsautlit123
%sysdrive%\$recycle.bin
%appdata%\microsoft

File Names:

Windows Activator.exe
KMSAuto.exe
$RKRR4GJ.exe

Geography:

11.2%
7.9%
6.5%
5.1%
5.1%
4.7%
4.2%
3.7%
3.7%
3.3%
3.3%
3.3%
2.8%
2.3%
1.9%
1.9%
1.9%
1.9%
1.4%
1.4%
1.4%
1.4%
1.4%
1.4%
1.4%
0.9%
0.9%
0.9%
0.9%
0.9%
0.9%
0.9%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%
0.5%

OS Version:

Windows 10 83.9%
Windows 8.1 8.3%
Windows 7 6.4%
Windows 8 1.4%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00001000

PE Sections:

Name Size of data MD5
.code 107008 f0a97c86f2496b89b3c0ffa963011515
.text 307200 f1d1dcb82445e9ab9b4b2f73af338172
.rdata 35840 845b07f0ebd235da7031a74ca0534020
.data 6125056 ffc2bfe9c8d13474abd65019ac12d070
.rsrc 45568 92d37d377e3e94190d286603efd8a1de

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for KMSAuto.exe
copyright for information about KMSAuto.exe